What best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page?

Question

Options

• AThe detections for the host are removed from the console immediately and no new detections will
• BYou cannot disable detections for a host
• CExisting detections for the host remain, but no new detections will display in the console going
• DPreventions will be disabled for the host

• A
  93% (57)
• B
  2% (1)
• C
  3% (2)
• D
  2% (1)

Explanation

The option that best describes what happens to detections in the console after clicking "Disable Detections" for a host from within the Host Management page is that the detections for the host are removed from the console immediately and no new detections will display in the console going forward. The "Disable Detections" feature allows you to enable or disable the detection and prevention capabilities of the Falcon sensor on a specific host. When you disable detections for a host, the sensor will stop sending any detection or prevention events to the Falcon console, and any existing events for that host will be removed from the console. When you enable detections for a host, the sensor will resume sending any new detection or prevention events to the Falcon console, but any previous events for that host will not be restored to the console.

No community discussion yet for this question.